MAL-2025-127027 Malicious code in hadi-teh93-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb2dab5fc89c93e0435319ea063e7f773454d18f841fe1b6b3f800bb4c63d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-keraktelor64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fefb28bf2c976149da7f871637a41f5ddcf795ab5776b556713c797da8eddde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-dodol69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceacad7a1a9361bc681bae2102b2bd8a3798c8f4ffd08965f618d16f927032f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104118

Malicious code in lisa-lapis33-riris npm...

MAL-2025-131364 Malicious code in wibowo-tahu53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d3a265bf3ea0ff977e0cb670120a054fb8840625ca85cfe42fde0993fc2f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-otak-otak68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed093bc7e1938ecfb1fced29e1a3d38f7a52a3d011793dab7fcd3d0dcf4337b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127256 Malicious code in hushed_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19f032eac252a165bd7803640543253a4de43238a4c53e3c69368e37bf70b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129215 Malicious code in oktafian-klanting92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aed1ed1936d72c40c76d56def9cbe23d213a34074af007cb5decd0a8c1463e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129052 Malicious code in ocha-oncom9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eb88657c41ca5ae14eb83a4dba02a0fec7dbf62b47a6a8501ac1746191f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-sate39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f364d8bca9c7d147f37e7406e3ee6b145b1f96230b1189f839d1318b27683aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lumpur32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852b867e1698f989213cf4a8fdef2dcbacf7d310506584746d084c4a24615df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538f7d1bec5f5843566a15e0dc63ccf7caf625360f712ac6acda087fb418b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128813 Malicious code in nana-enting58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a21b48dce0d36dd8f8c0c228e9f52528fa062e8d4fd54eb67a67dc189eee241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128792 Malicious code in nadia-sambel64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6202751fd6d6bb77d94a728cbaa70de8ca9b77ba2be8726345f9d5087b01118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126336 Malicious code in fadhil-enting77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5507e29abfead32071ae6a7272570e1a4b659588a53d18ae1db56ab22ec2d17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94761

Malicious code in tastyleechz3n npm...

Malicious code in geographical_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fa6873d69c5040291be5646dd2d0e327de6f6bdf6b68b00acf23a785c7a84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lapis68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e480183be5ff44a1b0817d0623724090d2709f204c45b081b7d944c895389ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93552

Malicious code in zul-tahu21-breki npm...

Malicious code in driving_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea77b359bb50caef899a5d05b1ffd520ed9e52461b7a4fbf0122b3eb256d1393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...